SOLVED Everything works EXCEPT CIFS login

[sjmorrow]

I can browse my shares and all permissions are correct if I am using AFP or SFTP. I am trying to switch to using CIFS, and my user gets "Access Denied" anytime I try and access the CIFS share. It works great if I enable guest access in the CIFS Share settings, but it rejects my user every time. I have verified permissions on the share over and over (the user is the owner of the share and ALL files inside it). Also, as previously stated it works fine with all other sharing services EXCEPT CIFS.

The only relevant messages I see in the logs are in /var/log/samba4/log.smbd and it has the following upon every failed login attempt:

Code:

[2014/08/13 17:26:25.353137,  1] ../source3/smbd/service.c:550(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

I have tried every combination of "Inherit Owner" and "Inherit Permissions" and "Inherit ACLs", and I get the same thing every time.
I have also ensured that CIFS is setup to use WORKGROUP, and verified that my PC is in fact assigned to WORKGROUP as well.

Can anyone provide some guidance on where I would begin to look at why samba is denying access to my user? I have the simplest possible setup, so this should not be this complicated. One user, one volume, one share.

Relevant details:

• CLIENT: Windows 8.1 x64
• FREENAS: FreeNAS-9.2.1.3-RELEASE-x64 (dc0c46b)
• I don't use AD or any sort of outside auth mechanism

EDIT: After setting the smb log level to 10 and trying again, I get this output in /var/log/samba4/log.smbd. Maybe someone can help me make sense of it.

Code:

[2014/08/13 17:57:47.499070,  5, pid=83710, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:528(debug_unix_user_token)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2014/08/13 17:57:47.499367,  5, pid=83710, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:594(tdbsam_getsampwnam)
  pdb_getsampwnam (TDB): error fetching database.
   Key: USER_my_user
[2014/08/13 17:57:47.499573,  4, pid=83710, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2014/08/13 17:57:47.499701,  3, pid=83710, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:399(check_sam_security)
  check_sam_security: Couldn't find user 'my_user' in passdb.
[2014/08/13 17:57:47.499819,  5, pid=83710, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:229(auth_check_ntlm_password)
  check_ntlm_password: sam authentication for user [my_user] FAILED with error NT_STATUS_NO_SUCH_USER
[2014/08/13 17:57:47.499945,  2, pid=83710, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:288(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [my_user] -> [my_user] FAILED with error NT_STATUS_NO_SUCH_USER
[2014/08/13 17:57:47.500053,  5, pid=83710, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:144(auth3_check_password)
  Checking NTLMSSP password for WORKGROUP\my_user failed: NT_STATUS_NO_SUCH_USER
[2014/08/13 17:57:47.500190,  3, pid=83710, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:1593(do_map_to_guest_server_info)
  No such user my_user[WORKGROUP] - using guest account

 

[sjmorrow]

As a developer, I know the best way to solve a problem you have been stuck on for an insane amount of time is just to explain the problem to someone else and "talk about it". So thanks for letting me "talk about it" freenas forum goers.

The solution: My user was not in the smb user database for some reason (still a mystery as to why), so going into the FreeNas GUI and "updating" my password (with the same value) was enough to sync it up and get everything work. Months of no access to my Shares from my PC and all I had to do was Click the "save" button on my user page....

 

[gpsguy]

I'm glad we could be of help. ;-)